$ rpki-client -vvf rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft File: LyR3675WsNegrUTCcX21_ggNyug.mft (raw, json) Hash identifier: UT5PQAWGSnhekPeP+zRU8cDs6G9RUifzhESiiU76vhg= Subject key identifier: 7A:DA:F0:7D:5A:EF:AF:DB:00:73:3D:BE:79:C0:EA:7A:54:F6:EF:CF Authority key identifier: 2F:24:77:EB:BE:56:B0:D7:A0:AD:44:C2:71:7D:B5:FE:08:0D:CA:E8 Certificate issuer: /CN=A91479A7/serialNumber=2F2477EBBE56B0D7A0AD44C2717DB5FE080DCAE8 Certificate serial: 022F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft Manifest number: 0215 Signing time: Fri 17 Apr 2026 02:59:51 +0000 Manifest this update: Fri 17 Apr 2026 02:59:50 +0000 Manifest next update: Fri 24 Apr 2026 02:59:50 +0000 Files and hashes: 1: LyR3675WsNegrUTCcX21_ggNyug.crl (hash: RUejPxfIEe4f+1EMgT61D1mo84c2cjOnK7MfQaQv7C4=) 2: 7EF0B0AC4D9B11EEB019A31FC4F9AE02.roa (hash: 85ndJ25GkWksXdD2wkzQ2/smQ3lSHNtoozH+Avdk67k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.crl rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 559 (0x22f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91479A7, serialNumber=2F2477EBBE56B0D7A0AD44C2717DB5FE080DCAE8 Validity Not Before: Apr 17 02:59:50 2026 GMT Not After : Apr 24 02:59:50 2026 GMT Subject: CN=69e1a227-4486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:20:b4:6a:3a:4e:58:a2:aa:66:7d:c6:af:43: 25:b1:8a:21:9f:42:07:bf:b1:35:bc:ff:ee:a9:b2: 81:56:cf:82:d9:5b:3e:f0:93:df:57:63:a2:5c:dd: f0:43:85:82:53:cc:58:ac:d6:e5:60:40:dc:97:06: aa:59:95:7a:4d:37:c4:4c:f1:1e:80:5f:2d:42:cc: f1:6d:97:9f:0a:6a:4c:a4:db:41:80:a9:b7:5a:3b: b8:b2:f9:9a:25:f2:ac:16:eb:f9:3b:2d:41:bb:bc: 0c:e7:c7:cc:cd:61:03:30:2b:d8:f3:cb:bb:14:4f: f4:74:9f:d1:99:f8:ed:25:f7:38:00:9c:f9:ff:f5: 9f:2b:6d:da:de:fa:15:c2:be:0a:2c:b4:4c:63:52: 5f:7f:a9:15:2f:cc:ce:28:17:c0:39:6f:75:ad:17: 4d:7c:87:46:7e:51:fd:42:e3:15:97:ab:fc:28:23: 3f:ea:38:6c:2f:c1:64:0c:18:dd:ed:8d:b5:73:2e: 5a:7b:7b:19:08:97:ae:84:f2:10:73:aa:82:d4:1f: 7f:09:7e:0c:e9:de:32:6f:2a:34:30:84:a4:a0:9c: 25:26:57:6f:bf:c2:ee:ad:a7:f6:7c:ac:2e:77:74: 05:6a:13:c6:9c:41:4c:96:e4:6d:c4:a4:d5:a1:ca: c8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:DA:F0:7D:5A:EF:AF:DB:00:73:3D:BE:79:C0:EA:7A:54:F6:EF:CF X509v3 Authority Key Identifier: keyid:2F:24:77:EB:BE:56:B0:D7:A0:AD:44:C2:71:7D:B5:FE:08:0D:CA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:4f:62:6b:e7:7c:e3:1c:20:f3:ee:b5:9e:21:ba:5c:2c:e7: 1d:27:5c:42:7c:89:1d:92:6b:3d:0f:24:77:0a:6e:bd:08:5d: 49:0b:76:a6:bf:ff:dc:d3:44:0a:0b:45:b1:e8:74:15:8e:28: 81:88:58:a0:75:a3:2b:aa:dc:b1:b7:00:12:30:23:04:24:9c: dc:00:f9:c6:2d:c8:9b:5e:88:07:20:8e:c6:ae:f3:7f:48:ff: a9:14:5f:94:da:6d:4d:43:25:68:68:fe:6c:c5:6b:ea:61:7d: 05:79:a5:5c:9a:96:38:59:c5:37:7b:13:bd:be:7f:d9:e8:a7: 2f:a3:9b:c8:24:c6:da:ac:be:0e:5b:b0:e6:05:3a:55:c6:da: 00:f6:57:b9:2d:54:3d:1e:90:12:af:ac:a3:d9:e7:43:82:a4: 90:71:14:b5:45:d2:71:ac:05:97:b1:1a:5c:23:7b:29:67:cb: 81:4b:93:5b:e8:d2:f5:23:5f:c0:e3:e8:29:24:72:f9:4b:55: 39:72:8e:44:04:1d:4e:84:6d:6c:7b:88:3a:ca:9b:c3:35:b4: 10:44:06:83:6e:59:72:2c:28:74:97:3d:ce:27:8d:fb:3f:4e: c1:02:a5:4e:90:ea:d1:fe:90:ec:8c:01:d4:d9:06:6e:7f:e5: bc:69:22:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc5QTcxMTAvBgNVBAUTKDJGMjQ3N0VCQkU1NkIwRDdBMEFENDRDMjcxN0RCNUZF MDgwRENBRTgwHhcNMjYwNDE3MDI1OTUwWhcNMjYwNDI0MDI1OTUwWjAYMRYwFAYD VQQDEw02OWUxYTIyNy00NDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzyC0ajpOWKKqZn3Gr0MlsYohn0IHv7E1vP/uqbKBVs+C2Vs+8JPfV2OiXN3w Q4WCU8xYrNblYEDclwaqWZV6TTfETPEegF8tQszxbZefCmpMpNtBgKm3Wju4svma JfKsFuv5Oy1Bu7wM58fMzWEDMCvY88u7FE/0dJ/RmfjtJfc4AJz5//WfK23a3voV wr4KLLRMY1Jff6kVL8zOKBfAOW91rRdNfIdGflH9QuMVl6v8KCM/6jhsL8FkDBjd 7Y21cy5ae3sZCJeuhPIQc6qC1B9/CX4M6d4ybyo0MISkoJwlJldvv8Luraf2fKwu d3QFahPGnEFMluRtxKTVocrISQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHra8H1a 76/bAHM9vnnA6npU9u/PMB8GA1UdIwQYMBaAFC8kd+u+VrDXoK1EwnF9tf4IDcro MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzlBNy84QkE5NjNENDQz RjUxMUVFOUE4RTRFMTZDNEY5QUUwMi9MeVIzNjc1V3NOZWdyVVRDY1gyMV9nZ055 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x5UjM2NzVXc05lZ3JVVENjWDIxX2dnTnl1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzlBNy84QkE5NjNENDQzRjUxMUVFOUE4RTRFMTZDNEY5QUUwMi9MeVIzNjc1V3NO ZWdyVVRDY1gyMV9nZ055dWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXk9ia+d84xwg8+61niG6XCznHSdcQnyJHZJrPQ8kdwpuvQhdSQt2pr//3NNE CgtFseh0FY4ogYhYoHWjK6rcsbcAEjAjBCSc3AD5xi3Im16IByCOxq7zf0j/qRRf lNptTUMlaGj+bMVr6mF9BXmlXJqWOFnFN3sTvb5/2einL6ObyCTG2qy+Dluw5gU6 VcbaAPZXuS1UPR6QEq+so9nnQ4KkkHEUtUXScawFl7EaXCN7KWfLgUuTW+jS9SNf wOPoKSRy+UtVOXKORAQdToRtbHuIOsqbwzW0EEQGg25ZciwodJc9zieN+z9OwQKl TpDq0f6Q7IwB1NkGbn/lvGkioQ== -----END CERTIFICATE-----Generated at Fri Apr 17 12:32:06 2026 by rpki-client